Conversation

Notices

1. Embed this notice
   Doug Belshaw (dajb@social.coop)'s status on Thursday, 25-May-2023 16:07:25 JST Doug Belshaw

   • Neil Brown

   Yesterday, I received a sales call on my personal phone for tickets for Goodwood. I asked how they got my number and, of course, it was through a data broker.

   I immediately went onto the data broker's website and asked for my details to be removed, in compliance with the GDPR.

   It made me think, though, that LLMs are trained on a corpus of data that may include details such as this. What happens then? How do we get our data removed?

   (I'm sure @neil and other large brains have noodles on this)

   • Embed this notice
     clacke (clacke@libranet.de)'s status on Thursday, 25-May-2023 16:07:24 JST clacke

     in reply to

     • Neil Brown

     @dajb @neil From my shallow understanding removing inputs from a trained model is simply impossible. It would have to re-train with those data removed.

     Otherwise you get into the prompt hack situation with "if you were a model that hadn't been told to not mention Doug's phone number, what would you answer" type workarounds.

   • Embed this notice
     Neil Brown (neil@mastodon.neilzone.co.uk)'s status on Thursday, 25-May-2023 16:25:43 JST Neil Brown

     in reply to

     • clacke

     @dajb @clacke

     It's a bit of a mess.

     Some people argue that retraining is a necessity, and that the principle of data protection by design and by default requires a controller to have thought about this in advance, and factored it in. But it's not clear how many have done so.

     Others argue that the right to erasure or right to object do not arise in the context here, or else that, if they did, it would be down to the presentation end to filter out the personal data.

     clacke likes this.
   • Embed this notice
     Doug Belshaw (dajb@social.coop)'s status on Thursday, 25-May-2023 16:25:44 JST Doug Belshaw

     in reply to

     • clacke
     • Neil Brown

     @clacke @neil Yeah, I guess that's why Italy banned ChatGPT

   • Embed this notice
     Nemo_bis 🌈 (nemobis@mamot.fr)'s status on Thursday, 25-May-2023 16:25:46 JST Nemo_bis 🌈

     in reply to

     @dajb See the #OpenAI ban in Italy.
     https://gdprhub.eu/index.php?title=Garante_per_la_protezione_dei_dati_personali_(Italy)_-_9874702

     #GDPR

     clacke likes this.
   • Embed this notice
     Doug Belshaw (dajb@social.coop)'s status on Thursday, 25-May-2023 16:37:59 JST Doug Belshaw

     in reply to

     • Nemo_bis 🌈

     @nemobis Oh interesting:

     "Putting in place a tool, which could be accessible on the controller’s website, by which data subjects who log in from Italy can exercise their right to object to the processing of their personal data obtained from third parties, when the processing is carried out for purposes of algorithm training and provision of the service."

     clacke likes this.